epel-devel April 2020

epel-devel@lists.fedoraproject.org

31 participants
95 discussions

Upgrade to rdiff-backup in EPEL-7
by Frank Crawford 21 Apr '20

21 Apr '20

We have pushed into testing and intend to eventually release a new version of rdiff-backup which has a significant incompatibly with the current distributed version, when used in client-server mode. The current version is v1.2.8 and written in Python2, while the new version is v2.0.0 and written in Python3, and the language change breaks client-server mode, due to incompatible data representations between Python2 and Python3. In all other respects the two versions are compatible including the ability to read and write existing backup repositories. It should be noted that the v1.2.8 was released over 11 years ago and while a small number of bug fixes have been added by the community, there has been no co-ordinated work for a number of years, and no further development will occur on the Python2 version. All future work, enhancements and bugfixes, including security bugfixes, will be to the Python3 version. If it is necessary to stay with the Python2 version, it is recommended that you exclude rdiff-backup from future updates. Also, if you are testing the Python3 update in EPEL-7 (and EPEL-8) some of the dependencies (python3-pyxattr and py3libacl) are also in the testing repositories. If you have any questions about the update, please contact me. Frank Crawford FAS: frankcrawford

3 4

Trying to find Sponsor to help me get Sensu Go into EPEL7/EPEL8
by Devin Acosta 21 Apr '20

21 Apr '20

My name is Devin Acosta, I am a Red Hat Certified Architect, and I have for the past about month now been trying to get Sensu Go (Open Source Edition) into EPEL 7 / EPEL 8. I have joined the fedora-devel mailing list and followed the process so far to the best of my ability. I was wondering if anyone here could provide some assistance, as this is the EPEL devel list. I have opened a bugzilla back on March 30th, located here: https://bugzilla.redhat.com/show_bug.cgi?id=1818670# I have had a few people comment on my SPEC file, and I have made several modifications per their request on it, but then the track has gone cold at this point. Hoping someone may have some ideas or shed light on what I need to do in order to try to get this finally into EPEL? Thanks much. Devin Acosta, RHCA

3 2

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 20 Apr '20

20 Apr '20

The following Fedora EPEL 7 Security updates need testing: Age URL 614 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 356 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 354 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 63 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-34295ace88 cacti-1.2.11-1.el7 cacti-spine-1.2.11-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b6453e2708 nrpe-4.0.2-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ede50a3d8b libasr-1.0.4-2.el7 opensmtpd-6.6.4p1-3.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6783237c17 chromium-81.0.4044.113-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-3f2d4cea8a ansible-2.9.7-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e3e05f0ce4 gnuchess-6.2.6-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing htslib-1.9-5.el7 libuv-1.37.0-1.el7 python-pysocks-1.6.8-7.el7 zimg-2.9.3-1.el7 Details about builds: ================================================================================ htslib-1.9-5.el7 (FEDORA-EPEL-2020-128fdf5e57) C library for high-throughput sequencing data formats -------------------------------------------------------------------------------- Update Information: Initial import. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ libuv-1.37.0-1.el7 (FEDORA-EPEL-2020-9f10160493) Platform layer for node.js -------------------------------------------------------------------------------- Update Information: Update to 1.37.0 ---- Update to libuv 1.36.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 20 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.37.0-1 - Update to 1.37.0 - https://github.com/libuv/libuv/blob/v1.37.0/ChangeLog * Fri Apr 17 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.36.0-3 - Actually add gating.yaml - Fix build for EPEL 7 * Fri Apr 17 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.36.0-2 - Add abidiff ignore file and add ABI gating test * Thu Apr 16 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.36.0-1 - Update to 1.36.0 - https://github.com/libuv/libuv/blob/v1.36.0/ChangeLog * Thu Feb 6 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.34.2-1 - Update to 1.34.2 - https://github.com/libuv/libuv/blob/v1.34.2/ChangeLog * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:1.34.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Jan 13 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.34.1-1 - Update to 1.34.1 - https://github.com/libuv/libuv/blob/v1.34.1/ChangeLog -------------------------------------------------------------------------------- References: [ 1 ] Bug #1790260 - libuv-1.36.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1790260 [ 2 ] Bug #1825715 - libuv-1.37.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825715 -------------------------------------------------------------------------------- ================================================================================ python-pysocks-1.6.8-7.el7 (FEDORA-EPEL-2020-3413d94460) A Python SOCKS client module -------------------------------------------------------------------------------- Update Information: Obsolete/Provide python-SocksiPy in epel7. Fixes bug #1648422 -------------------------------------------------------------------------------- ChangeLog: * Sun Apr 19 2020 Kevin Fenzi <kevin(a)scrye.com> - 1.6.8-7 - Obsolete/Provide python-SocksiPy in epel7. Fixes bug #1648422 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1648422 - python2-pysocks upgrade requires python-SocksiPy which conflicts with each other. https://bugzilla.redhat.com/show_bug.cgi?id=1648422 -------------------------------------------------------------------------------- ================================================================================ zimg-2.9.3-1.el7 (FEDORA-EPEL-2020-5ac302966d) Scaling, color space conversion, and dithering library -------------------------------------------------------------------------------- Update Information: Add additional filter. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 4 2020 Simone Caronni <negativo17(a)gmail.com> - 2.9.3-1 - Update to 2.9.3. * Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.9.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Cannot retire epel7 package
by Orion Poplawski 20 Apr '20

20 Apr '20

zabbix22 (epel7)]$ fedpkg retire 'Zabbix 2.2 is no longer maintained upstream' Fedora release (epel7) is in state 'current' - retire operation is not allowed. What's up? -- Orion Poplawski Manager of NWRA Technical Systems 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

3 4

Re: Co-Maintainers wanted for python-lockfile EPEL branches
by Miro Hrončok 20 Apr '20

20 Apr '20

On 20. 04. 20 13:45, Fabio Valentini wrote: > and it seems I > can't even figure out how to determine which EPEL packages require > python*-lockfile. Take the attached repo files. They are good for repoquery, adapted from epel-release. They don't have -testing repos, but -testingx, so you don't accidentally enable them with dnf --enablerepo=\*-testing. Usage: $ repoquery --repo=epel8{,-source} --whatrequires python2-lockfile pungi-legacy-0:4.1.38-1.el8.2.noarch python2-pungi-0:4.1.38-1.el8.2.noarch -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok

2 1

Re: Co-Maintainers wanted for python-lockfile EPEL branches
by Troy Dawson 20 Apr '20

20 Apr '20

On a RHEL8 machine, doing a dnf repoquery --whatrequires python3-lockfile dnf repoquery --whatrequires python2-lockfile Shows that the following depend on it duplicity python3-fedora pungi-legacy I haven't checked EPEL7 yet. On Mon, Apr 20, 2020 at 4:46 AM Fabio Valentini <decathorpe(a)gmail.com> wrote: > > Hi everybody, > > I took over python-lockfile some time ago because it was FTBFS in > fedora / orphaned at the time, but it's a dependency of some of my > packages. > > However, I have zero interest in maintaining the EPEL branches of that > package, because I have no packages in EPEL myself, and it seems I > can't even figure out how to determine which EPEL packages require > python*-lockfile. > > I have received two PRs for the epel7 branch already, and I don't even > know if they're fine or not, so any help would be appreciated. > > If nobody steps up within the next two weeks, I will probably retire > the epel7 and epel8 branches of python-lockfile. > > Fabio > _______________________________________________ > devel mailing list -- devel(a)lists.fedoraproject.org > To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org

2 1

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 19 Apr '20

19 Apr '20

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-83cd17b92f nrpe-4.0.2-2.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-8fcf741d7f cacti-1.2.11-1.el8 cacti-spine-1.2.11-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-dfc01a6be3 chromium-81.0.4044.113-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing ansible-2.9.7-1.el8 colordiff-1.0.19-1.el8 darktable-3.0.2-1.el8 libwebsockets-4.0.1-2.el8 mosquitto-1.6.9-2.el8 oval-graph-1.1.1-1.el8 pylibacl-0.5.4-3.el8 python-dominate-2.5.1-1.el8 python-scramp-1.1.1-1.el8 python-winsspi-0.0.9-1.el8 terminator-1.92-1.el8 testcloud-0.3.2-1.el8 votca-csg-1.6-1.el8 votca-tools-1.6-1.el8 votca-xtp-1.6-1.el8 Details about builds: ================================================================================ ansible-2.9.7-1.el8 (FEDORA-EPEL-2020-5af12f8767) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: Update to bugfix and security update 2.9.7. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.… for detailed changes. ---- Update to upstream 2.9.6 and fix for 2 CVES: CVE-2020-1737, CVE-2020-1739 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 18 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.7-1 - Update to 2.9.7. - fixes CVE-2020-1733 CVE-2020-1735 CVE-2020-1740 CVE-2020-1746 CVE-2020-1753 CVE-2020-10684 CVE-2020-10685 CVE-2020-10691 - Drop the -s from the shebang to allow ansible to use locally installed modules. * Fri Mar 6 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.6-1 - Update to 2.9.6. Fixes bug #1810373 - fixes for CVE-2020-1737, CVE-2020-1739 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1805319 - CVE-2020-1740 ansible: secrets readable after ansible-vault edit [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805319 [ 2 ] Bug #1805322 - CVE-2020-1739 ansible: svn module leaks password when specified as a parameter [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805322 [ 3 ] Bug #1805326 - CVE-2020-1738 ansible: module package can be selected by the ansible facts [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805326 [ 4 ] Bug #1805329 - CVE-2020-1737 ansible: Extract-Zip function in win_unzip module does not check extracted path [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805329 [ 5 ] Bug #1805332 - CVE-2020-1736 ansible: atomic_move primitive sets permissive permissions [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805332 [ 6 ] Bug #1805336 - CVE-2020-1735 ansible: path injection on dest parameter in fetch module [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805336 [ 7 ] Bug #1805339 - CVE-2020-1734 ansible: shell enabled by default in a pipe lookup plugin subprocess [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805339 [ 8 ] Bug #1805342 - CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805342 [ 9 ] Bug #1808472 - CVE-2020-1746 ansible: Information disclosure issue in ldap_attr and ldap_entry modules [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1808472 [ 10 ] Bug #1810373 - ansible-2.9.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1810373 [ 11 ] Bug #1811933 - CVE-2020-1753 ansible: kubectl connection plugin leaks sensitive information [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1811933 [ 12 ] Bug #1816311 - CVE-2020-10684 ansible: code injection when using ansible_facts as a subkey [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1816311 [ 13 ] Bug #1816312 - CVE-2020-10685 ansible: modules which use files encrypted with vault are not properly cleaned up [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1816312 [ 14 ] Bug #1817979 - CVE-2020-10691 ansible: archive traversal vulnerability in ansible-galaxy collection install [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1817979 [ 15 ] Bug #1825070 - ansible-2.9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825070 -------------------------------------------------------------------------------- ================================================================================ colordiff-1.0.19-1.el8 (FEDORA-EPEL-2020-c099c5066b) Color terminal highlighter for diff files -------------------------------------------------------------------------------- Update Information: Update to 1.0.19. Changes in this version: * Add `difffile` color option, allowing more git-like coloring (separate color for header of each changed file) * Provide support for 24-bit colour strings -------------------------------------------------------------------------------- ChangeLog: * Sun Apr 19 2020 Richard Fearn <richardfearn(a)gmail.com> - 1.0.19-1 - Update to 1.0.19 * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.18-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ darktable-3.0.2-1.el8 (FEDORA-EPEL-2020-96d9d5c5bc) Utility to organize and develop raw images -------------------------------------------------------------------------------- Update Information: 3.0.2 release -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 18 2020 Germano Massullo <germano.massullo(a)gmail.com> - 3.0.2-1 - 3.0.2 release - Removed 4447-legacy_params.patch -------------------------------------------------------------------------------- ================================================================================ libwebsockets-4.0.1-2.el8 (FEDORA-EPEL-2020-61ef29a530) A lightweight C library for Websockets -------------------------------------------------------------------------------- Update Information: This is the libwebsockets C library for lightweight websocket clients and servers. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ mosquitto-1.6.9-2.el8 (FEDORA-EPEL-2020-1f0e0e9d03) An Open Source MQTT v3.1/v3.1.1 Broker -------------------------------------------------------------------------------- Update Information: Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power sensors or mobile devices such as phones, embedded computers or micro-controllers like the Arduino. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ oval-graph-1.1.1-1.el8 (FEDORA-EPEL-2020-1860fb4343) Tool for visualization of SCAP rule evaluation results -------------------------------------------------------------------------------- Update Information: release 1.1.1 ---- Fixes the required dependency ---- release 1.1.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.1-1 - release 1.1.1 * Fri Apr 17 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.0-2 - Fixes the required dependency * Wed Apr 15 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.0-1 - release 1.1.0 -------------------------------------------------------------------------------- ================================================================================ pylibacl-0.5.4-3.el8 (FEDORA-EPEL-2020-1fa883bc10) POSIX.1e ACLs library wrapper for Python -------------------------------------------------------------------------------- Update Information: Release for EPEL-8 with Python2 and Python3 versions -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-dominate-2.5.1-1.el8 (FEDORA-EPEL-2020-6f66312795) Python library for HTML documents -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 2.5.1 (rhbz#1697397) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-scramp-1.1.1-1.el8 (FEDORA-EPEL-2020-405e72da3e) An implementation of the SCRAM protocol -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 1.1.1 -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 29 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.1.1-1 - Update to latest upstream release 1.1.1 -------------------------------------------------------------------------------- ================================================================================ python-winsspi-0.0.9-1.el8 (FEDORA-EPEL-2020-4c72fff7d9) Windows SSPI library in Python -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 0.0.9 (rhbz#1821092) -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 8 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.9-1 - Update to latest upstream release 0.0.9 (rhbz#1821092) * Mon Apr 6 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.8-1 - Update to latest upstream release 0.0.8 (rhbz#1821092) * Mon Mar 30 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.7-1 - Use LICENSE file shipped in source tarball - Update to latest upstream release 0.0.7 (rhbz#1814977) * Fri Mar 27 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.5-1 - Update to latest upstream release 0.0.5 (rhbz#1814977) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1821092 - python-winsspi-0.0.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1821092 -------------------------------------------------------------------------------- ================================================================================ terminator-1.92-1.el8 (FEDORA-EPEL-2020-6850774286) Store and run multiple GNOME terminals in one window -------------------------------------------------------------------------------- Update Information: This update brings the new Terminator release 1.92 to RHEL8 based linux installation box near you. This is the first release of the new Terminator Team at GitHub (https://github.com/gnome-terminator/terminator). It finally supports Python 3 and fixes a lot of bugs. You can find a detailed changelog here: https://github.com/gnome-terminator/terminator/blob/master/CHANGELOG.md -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ testcloud-0.3.2-1.el8 (FEDORA-EPEL-2020-ab6f9314fb) Tool for running cloud images locally -------------------------------------------------------------------------------- Update Information: - Require only libguestfs-tools-c from libguestfs - Bump default RAM size to 768 MB - Fix for libvirt >= 6.0 - Fix DeprecationWarning: invalid escape sequence \w -------------------------------------------------------------------------------- ChangeLog: * Sun Apr 19 2020 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 0.3.2-1 - Require only libguestfs-tools-c from libguestfs - Bump default RAM size to 768 MB - Fix for libvirt >= 6.0 - Fix DeprecationWarning: invalid escape sequence \w -------------------------------------------------------------------------------- ================================================================================ votca-csg-1.6-1.el8 (FEDORA-EPEL-2020-a059b2b410) VOTCA coarse-graining engine -------------------------------------------------------------------------------- Update Information: Bump Votca Package to 1.6 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 18 2020 Christoph Junghans <junghans(a)votca.org> - 1.6-1 - Version bump to v1.6 (bug #1825473) * Mon Feb 10 2020 Christoph Junghans <junghans(a)votca.org> - 1.6~rc2-1 - Version bump to 1.6~rc2 - Drop 473.patch - merged upstream * Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-0.3rc1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Dec 12 2019 Christoph Junghans <junghans(a)votca.org> - 1.6-0.2rc1 - Added upstream 473.patch to fix 32bit build * Thu Dec 5 2019 Christoph Junghans <junghans(a)votca.org> - 1.6-0.1rc1 - Version bump to 1.6_rc1 (bug #1779848) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1825473 - votca-csg-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825473 [ 2 ] Bug #1825474 - votca-tools-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825474 [ 3 ] Bug #1825475 - votca-xtp-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825475 -------------------------------------------------------------------------------- ================================================================================ votca-tools-1.6-1.el8 (FEDORA-EPEL-2020-a059b2b410) VOTCA tools library -------------------------------------------------------------------------------- Update Information: Bump Votca Package to 1.6 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 18 2020 Christoph Junghans <junghans(a)votca.org> - 1.6-1 - Version bump to v1.6 (bug #1825474) * Mon Feb 10 2020 Christoph Junghans <junghans(a)votca.org> - 1.6~rc2-1 - Version bump to 1.6~rc2 - Drop 196.patch, 197.patch and 199.patch - merged upstream * Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-0.4rc1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Dec 12 2019 Christoph Junghans <junghans(a)votca.org> - 1.6-0.3rc1 - Added upstream 196.patch to failing table test - Added upstream 199.patch to fix 32bit builds * Thu Dec 5 2019 Christoph Junghans <junghans(a)votca.org> - 1.6-0.2rc1 - Added upstream 197.patch to fix CMake files * Thu Dec 5 2019 Christoph Junghans <junghans(a)votca.org> - 1.6-0.1rc1 - Version bump to 1.6_rc1 (bug #1779862) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1825473 - votca-csg-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825473 [ 2 ] Bug #1825474 - votca-tools-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825474 [ 3 ] Bug #1825475 - votca-xtp-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825475 -------------------------------------------------------------------------------- ================================================================================ votca-xtp-1.6-1.el8 (FEDORA-EPEL-2020-a059b2b410) VOTCA excitation and charge properties module -------------------------------------------------------------------------------- Update Information: Bump Votca Package to 1.6 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1825473 - votca-csg-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825473 [ 2 ] Bug #1825474 - votca-tools-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825474 [ 3 ] Bug #1825475 - votca-xtp-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825475 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 19 Apr '20

19 Apr '20

The following Fedora EPEL 7 Security updates need testing: Age URL 613 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 355 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 353 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 62 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b23fa957bb drupal7-ckeditor-1.19-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-16bf726581 php-robrichards-xmlseclibs1-1.4.3-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-34295ace88 cacti-1.2.11-1.el7 cacti-spine-1.2.11-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b6453e2708 nrpe-4.0.2-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ede50a3d8b libasr-1.0.4-2.el7 opensmtpd-6.6.4p1-3.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6783237c17 chromium-81.0.4044.113-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing NetworkManager-l2tp-1.2.18-1.el7 ansible-2.9.7-1.el7 gnuchess-6.2.6-1.el7 oval-graph-1.1.1-1.el7 pylibacl-0.5.2-13.el7 python3-six-1.14.0-1.el7 simde-0.0.0-1.git29b9110.el7 Details about builds: ================================================================================ NetworkManager-l2tp-1.2.18-1.el7 (FEDORA-EPEL-2020-fe20536e09) NetworkManager VPN plugin for L2TP and L2TP/IPsec -------------------------------------------------------------------------------- Update Information: Updated to 1.2.18 release -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 18 2020 Douglas Kosovic <doug(a)uq.edu.au> - 1.2.18-1 - Updated to 1.2.18 release - Use --enable-libreswan-dh2 configure switch -------------------------------------------------------------------------------- ================================================================================ ansible-2.9.7-1.el7 (FEDORA-EPEL-2020-3f2d4cea8a) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: Update to bugfix and security update 2.9.7. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.… for detailed changes. -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 18 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.7-1 - Update to 2.9.7. - fixes CVE-2020-1733 CVE-2020-1735 CVE-2020-1740 CVE-2020-1746 CVE-2020-1753 CVE-2020-10684 CVE-2020-10685 CVE-2020-10691 - Drop the -s from the shebang to allow ansible to use locally installed modules. * Mon Apr 6 2020 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 2.9.6-3 - Ship ansible-test in both (py2 and py3) variants * Sun Apr 5 2020 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 2.9.6-2 - Enable python3 subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #1805319 - CVE-2020-1740 ansible: secrets readable after ansible-vault edit [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805319 [ 2 ] Bug #1805326 - CVE-2020-1738 ansible: module package can be selected by the ansible facts [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805326 [ 3 ] Bug #1805332 - CVE-2020-1736 ansible: atomic_move primitive sets permissive permissions [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805332 [ 4 ] Bug #1805336 - CVE-2020-1735 ansible: path injection on dest parameter in fetch module [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805336 [ 5 ] Bug #1805339 - CVE-2020-1734 ansible: shell enabled by default in a pipe lookup plugin subprocess [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805339 [ 6 ] Bug #1805342 - CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805342 [ 7 ] Bug #1808472 - CVE-2020-1746 ansible: Information disclosure issue in ldap_attr and ldap_entry modules [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1808472 [ 8 ] Bug #1811933 - CVE-2020-1753 ansible: kubectl connection plugin leaks sensitive information [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1811933 [ 9 ] Bug #1816311 - CVE-2020-10684 ansible: code injection when using ansible_facts as a subkey [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1816311 [ 10 ] Bug #1816312 - CVE-2020-10685 ansible: modules which use files encrypted with vault are not properly cleaned up [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1816312 [ 11 ] Bug #1817979 - CVE-2020-10691 ansible: archive traversal vulnerability in ansible-galaxy collection install [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1817979 [ 12 ] Bug #1825070 - ansible-2.9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825070 -------------------------------------------------------------------------------- ================================================================================ gnuchess-6.2.6-1.el7 (FEDORA-EPEL-2020-e3e05f0ce4) The GNU chess program -------------------------------------------------------------------------------- Update Information: 6.2.6 -------------------------------------------------------------------------------- ChangeLog: * Sun Apr 19 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 6.2.6-1 - 6.2.6 * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.5-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.5-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.5-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.5-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon Feb 19 2018 Mat��j Cepl <mcepl(a)redhat.com> - 6.2.5-6 - Add gcc as BuildRequires and remove Groups (obsolete for many relases.) * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Sun Jul 30 2017 Florian Weimer <fweimer(a)redhat.com> - 6.2.5-3 - Rebuild with binutils fix for ppc64le (#1475636) * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1749177 - CVE-2019-15767 gnuchess: stack-based overflow in cmd_load in frontend/cmd.cc via crafted EPD file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1749177 [ 2 ] Bug #1749178 - CVE-2019-15767 gnuchess: stack-based overflow in cmd_load in frontend/cmd.cc via crafted EPD file [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1749178 [ 3 ] Bug #1825541 - gnuchess-6.2.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825541 -------------------------------------------------------------------------------- ================================================================================ oval-graph-1.1.1-1.el7 (FEDORA-EPEL-2020-b1e03c329a) Tool for visualization of SCAP rule evaluation results -------------------------------------------------------------------------------- Update Information: release 1.1.1 ---- Fixes the required dependency ---- release 1.1.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.1-1 - release 1.1.1 * Fri Apr 17 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.0-2 - Fixes the required dependency * Wed Apr 15 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.0-1 - release 1.1.0 -------------------------------------------------------------------------------- ================================================================================ pylibacl-0.5.2-13.el7 (FEDORA-EPEL-2020-b27ca08622) POSIX.1e ACLs library wrapper for python -------------------------------------------------------------------------------- Update Information: Rebuilt for python3 on EPEL 7 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 18 2020 Frank Crawford <frank(a)crawford.emu.id.au> - 0.5.2-13 - Rebuilt for python3 on EPEL 7 and 8 * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.5.2-9 - Rebuilt for Python 3.7 * Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Feb 7 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.5.2-7 - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Mon Dec 19 2016 Miro Hron��ok <mhroncok(a)redhat.com> - 0.5.2-3 - Rebuild for Python 3.6 * Tue Jul 19 2016 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.5.2-2 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Pa… * Mon May 2 2016 Yclept Nemo <pscjtwjdjtAhnbjm/dpn> - 0.5.2-1 - updated to 0.5.2 - phase out python-libacl (it's been a while...) - run checks - python3 subpackage - remove outdated macros - (original change date Mon Jan 12 2015) * Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.5.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.5.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.5.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.5.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python3-six-1.14.0-1.el7 (FEDORA-EPEL-2020-ec8dcb9990) Python 2 and 3 compatibility utilities -------------------------------------------------------------------------------- Update Information: Update to 1.14.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2020 Orion Poplawski <orion(a)nwra.com> - 1.14.0-1 - Update to 1.14.0 (bugz#1821211) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1821211 - Please update it to 1.14 https://bugzilla.redhat.com/show_bug.cgi?id=1821211 -------------------------------------------------------------------------------- ================================================================================ simde-0.0.0-1.git29b9110.el7 (FEDORA-EPEL-2020-89e4b0a22d) SIMD Everywhere -------------------------------------------------------------------------------- Update Information: - Initial import. - Build with meson and ninja-build instead of cmake. - Allow failures for tests or skip tests on ppc64le. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1823001 - Review Request: simde - SIMD Everywhere https://bugzilla.redhat.com/show_bug.cgi?id=1823001 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 17 Apr '20

17 Apr '20

The following Fedora EPEL 7 Security updates need testing: Age URL 612 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 353 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 351 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 61 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b23fa957bb drupal7-ckeditor-1.19-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-16bf726581 php-robrichards-xmlseclibs1-1.4.3-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-34295ace88 cacti-1.2.11-1.el7 cacti-spine-1.2.11-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b6453e2708 nrpe-4.0.2-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ede50a3d8b libasr-1.0.4-2.el7 opensmtpd-6.6.4p1-3.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing chromium-81.0.4044.113-1.el7 libuv-1.36.0-3.el7 oval-graph-1.1.0-3.el7 pgbouncer-1.12.0-4.el7 python-tzlocal-1.2-3.el7 Details about builds: ================================================================================ chromium-81.0.4044.113-1.el7 (FEDORA-EPEL-2020-6783237c17) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: A new major version of Chromium without any security bugs! Just kidding. Here's the CVE list: CVE-2020-6454 CVE-2020-6423 CVE-2020-6455 CVE-2020-6430 CVE-2020-6456 CVE-2020-6431 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440 CVE-2020-6441 CVE-2020-6442 CVE-2020-6443 CVE-2020-6444 CVE-2020-6445 CVE-2020-6446 CVE-2020-6447 CVE-2020-6448 CVE-2020-6432 CVE-2020-6457 Oh, and this build switches over to a static build, so the chromium-libs and chromium- libs-media subpackages are now obsolete, but it should be slightly better for performance. ---- Bugfix release from Google for 80.0.3987.162. ---- Update to 80.0.3987.162. Fixes the following CVEs: * CVE-2020-6450 * CVE-2020-6451 �� CVE-2020-6452 ---- Update to 80.0.3987.149. Upstream says it fixes "13" security issues, but only lists these CVEs: * CVE-2020-6422: Use after free in WebGL * CVE-2020-6424: Use after free in media * CVE-2020-6425: Insufficient policy enforcement in extensions. * CVE-2020-6426: Inappropriate implementation in V8 * CVE-2020-6427: Use after free in audio * CVE-2020-6428: Use after free in audio * CVE-2020-6429: Use after free in audio. * CVE-2019-20503: Out of bounds read in usersctplib. * CVE-2020-6449: Use after free in audio -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 16 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.113-1 - update to 81.0.4044.113 * Mon Apr 13 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.92-1 - update to 81.0.4044.92 - squelch the selinux output in the post scriptlet - add Provides/Obsoletes in case we're build with shared set to 0 - add ulimit -n 4096 (needed for static builds, probably not harmful for shared builds either) - do static build * Sat Apr 4 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.163-1 - update to 80.0.3987.163 * Wed Apr 1 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.162-1 - update to 80.0.3987.162 * Wed Mar 18 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.149-1 - update to 80.0.3987.149 * Thu Feb 27 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.132-1 - update to 80.0.3987.132 - disable C++17 changes (this means f32+ will no longer build, but it segfaulted immediately) * Thu Feb 27 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.122-1 - update to 80.0.3987.122 * Mon Feb 17 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.106-1 - update to 80.0.3987.106 * Wed Feb 5 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.87-1 - update to 80.0.3987.87 * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 79.0.3945.130-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1815241 - CVE-2020-6424 chromium-browser: Use after free in media https://bugzilla.redhat.com/show_bug.cgi?id=1815241 [ 2 ] Bug #1815242 - CVE-2020-6425 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1815242 [ 3 ] Bug #1815243 - CVE-2020-6426 chromium-browser: Inappropriate implementation in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1815243 [ 4 ] Bug #1815244 - CVE-2020-6427 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1815244 [ 5 ] Bug #1815245 - CVE-2020-6428 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1815245 [ 6 ] Bug #1815247 - CVE-2020-6429 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1815247 [ 7 ] Bug #1815248 - CVE-2020-6449 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1815248 [ 8 ] Bug #1815259 - CVE-2020-6422 chromium-browser: Use after free in WebGL https://bugzilla.redhat.com/show_bug.cgi?id=1815259 [ 9 ] Bug #1820155 - CVE-2020-6450 chromium-browser: Use after free in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1820155 [ 10 ] Bug #1820156 - CVE-2020-6451 chromium-browser: Use after free in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1820156 [ 11 ] Bug #1820157 - CVE-2020-6452 chromium-browser: Heap buffer overflow in media https://bugzilla.redhat.com/show_bug.cgi?id=1820157 [ 12 ] Bug #1822604 - CVE-2020-6454 chromium-browser: Use after free in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822604 [ 13 ] Bug #1822605 - CVE-2020-6423 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1822605 [ 14 ] Bug #1822606 - CVE-2020-6455 chromium-browser: Out of bounds read in WebSQL https://bugzilla.redhat.com/show_bug.cgi?id=1822606 [ 15 ] Bug #1822607 - CVE-2020-6430 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1822607 [ 16 ] Bug #1822608 - CVE-2020-6456 chromium-browser: Insufficient validation of untrusted input in clipboard https://bugzilla.redhat.com/show_bug.cgi?id=1822608 [ 17 ] Bug #1822609 - CVE-2020-6431 chromium-browser: Insufficient policy enforcement in full screen https://bugzilla.redhat.com/show_bug.cgi?id=1822609 [ 18 ] Bug #1822610 - CVE-2020-6433 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822610 [ 19 ] Bug #1822611 - CVE-2020-6434 chromium-browser: Use after free in devtools https://bugzilla.redhat.com/show_bug.cgi?id=1822611 [ 20 ] Bug #1822612 - CVE-2020-6435 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822612 [ 21 ] Bug #1822613 - CVE-2020-6436 chromium-browser: Use after free in window management https://bugzilla.redhat.com/show_bug.cgi?id=1822613 [ 22 ] Bug #1822614 - CVE-2020-6437 chromium-browser: Inappropriate implementation in WebView https://bugzilla.redhat.com/show_bug.cgi?id=1822614 [ 23 ] Bug #1822615 - CVE-2020-6438 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822615 [ 24 ] Bug #1822616 - CVE-2020-6439 chromium-browser: Insufficient policy enforcement in navigations https://bugzilla.redhat.com/show_bug.cgi?id=1822616 [ 25 ] Bug #1822617 - CVE-2020-6440 chromium-browser: Inappropriate implementation in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822617 [ 26 ] Bug #1822618 - CVE-2020-6441 chromium-browser: Insufficient policy enforcement in omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1822618 [ 27 ] Bug #1822619 - CVE-2020-6442 chromium-browser: Inappropriate implementation in cache https://bugzilla.redhat.com/show_bug.cgi?id=1822619 [ 28 ] Bug #1822620 - CVE-2020-6443 chromium-browser: Insufficient data validation in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1822620 [ 29 ] Bug #1822621 - CVE-2020-6444 chromium-browser: Uninitialized use in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1822621 [ 30 ] Bug #1822622 - CVE-2020-6445 chromium-browser: Insufficient policy enforcement in trusted types https://bugzilla.redhat.com/show_bug.cgi?id=1822622 [ 31 ] Bug #1822623 - CVE-2020-6446 chromium-browser: Insufficient policy enforcement in trusted types https://bugzilla.redhat.com/show_bug.cgi?id=1822623 [ 32 ] Bug #1822624 - CVE-2020-6447 chromium-browser: Inappropriate implementation in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1822624 [ 33 ] Bug #1822625 - CVE-2020-6448 chromium-browser: Use after free in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1822625 [ 34 ] Bug #1824949 - CVE-2020-6457 chromium-browser: Use after free in speech recognizer https://bugzilla.redhat.com/show_bug.cgi?id=1824949 -------------------------------------------------------------------------------- ================================================================================ libuv-1.36.0-3.el7 (FEDORA-EPEL-2020-c85c211ad1) Platform layer for node.js -------------------------------------------------------------------------------- Update Information: Update to libuv 1.36.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.36.0-3 - Actually add gating.yaml - Fix build for EPEL 7 * Fri Apr 17 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.36.0-2 - Add abidiff ignore file and add ABI gating test * Thu Apr 16 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.36.0-1 - Update to 1.36.0 - https://github.com/libuv/libuv/blob/v1.36.0/ChangeLog * Thu Feb 6 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.34.2-1 - Update to 1.34.2 - https://github.com/libuv/libuv/blob/v1.34.2/ChangeLog * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:1.34.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Jan 13 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.34.1-1 - Update to 1.34.1 - https://github.com/libuv/libuv/blob/v1.34.1/ChangeLog -------------------------------------------------------------------------------- References: [ 1 ] Bug #1790260 - libuv-1.36.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1790260 -------------------------------------------------------------------------------- ================================================================================ oval-graph-1.1.0-3.el7 (FEDORA-EPEL-2020-feb2a10bad) Tool for visualization of SCAP rule evaluation results -------------------------------------------------------------------------------- Update Information: Fixes the required dependency ---- release 1.1.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.0-2 - Fixes the required dependency * Wed Apr 15 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.0-1 - release 1.1.0 -------------------------------------------------------------------------------- ================================================================================ pgbouncer-1.12.0-4.el7 (FEDORA-EPEL-2020-67042510a1) Lightweight connection pooler for PostgreSQL -------------------------------------------------------------------------------- Update Information: Update SPEC file (build & runtime requirements, macros, rpmlint fixes, etc.) & update version for CentOS/RHEL. - Fix dependencies in EPEL 8 - Do not touch in scriptlets or SysV init script (CentOS/RHEL 6) folders and files already part of the package - Permissions on the files already part of the package - SELinux context is wrong i(it's not even in the policy) in the SysV init script and if needed should be managed with semanage fcontext, not in the script. - The daemon runs unconfined, so the file context is useless in the SysV init script - Fix build on RHEL/CentOS 6/7/8. - Do not use a normal home folder and shell for the user. - Do not remove/change files in the scriptlets. - Do not start in daemon mode in systemd units. - Trim changelog. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-tzlocal-1.2-3.el7 (FEDORA-EPEL-2020-86d3c3536f) A Python module that tries to figure out what your local timezone is -------------------------------------------------------------------------------- Update Information: Build python3 support for RHEL/CentOS 7 -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 16 2020 Robert Scheck <robert(a)fedoraproject.org> - 1.2-3 - Build python3 support for RHEL/CentOS 7 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 17 Apr '20

17 Apr '20

The following Fedora EPEL 8 Security updates need testing: Age URL 41 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-02f03affd4 ansible-2.9.6-1.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-83cd17b92f nrpe-4.0.2-2.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-8fcf741d7f cacti-1.2.11-1.el8 cacti-spine-1.2.11-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing TurboGears2-2.4.3-2.el8 chromium-81.0.4044.113-1.el8 js-jquery-3.5.0-3.el8 oval-graph-1.1.0-3.el8 perl-Text-ASCIITable-0.22-11.el8 pgbouncer-1.12.0-4.el8 python-freeipa-1.0.3-1.el8 python-pyftdi-0.50.1-1.el8 python-zope-sqlalchemy-1.3-1.el8 python3-pyxattr-0.7.1-1.el8 swift-lang-5.2.2-1.el8 Details about builds: ================================================================================ TurboGears2-2.4.3-2.el8 (FEDORA-EPEL-2020-c2de543c85) Next generation front-to-back web development megaframework -------------------------------------------------------------------------------- Update Information: Initial build for EPEL8. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ chromium-81.0.4044.113-1.el8 (FEDORA-EPEL-2020-dfc01a6be3) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: A new major version of Chromium without any security bugs! Just kidding. Here's the CVE list: CVE-2020-6454 CVE-2020-6423 CVE-2020-6455 CVE-2020-6430 CVE-2020-6456 CVE-2020-6431 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440 CVE-2020-6441 CVE-2020-6442 CVE-2020-6443 CVE-2020-6444 CVE-2020-6445 CVE-2020-6446 CVE-2020-6447 CVE-2020-6448 CVE-2020-6432 CVE-2020-6457 Oh, and this build switches over to a static build, so the chromium-libs and chromium- libs-media subpackages are now obsolete, but it should be slightly better for performance. ---- Bugfix release from Google for 80.0.3987.162. ---- Update to 80.0.3987.162. Fixes the following CVEs: * CVE-2020-6450 * CVE-2020-6451 �� CVE-2020-6452 ---- Update to 80.0.3987.149. Upstream says it fixes "13" security issues, but only lists these CVEs: * CVE-2020-6422: Use after free in WebGL * CVE-2020-6424: Use after free in media * CVE-2020-6425: Insufficient policy enforcement in extensions. * CVE-2020-6426: Inappropriate implementation in V8 * CVE-2020-6427: Use after free in audio * CVE-2020-6428: Use after free in audio * CVE-2020-6429: Use after free in audio. * CVE-2019-20503: Out of bounds read in usersctplib. * CVE-2020-6449: Use after free in audio ---- Update to 80.0.3987.132. Lots of security fixes here. VAAPI re-enabled by default (except on nvidia). List of CVEs fixed (since last update): * CVE-2019-20446 * CVE-2020-6381 * CVE-2020-6382 * CVE-2020-6383 * CVE-2020-6384 * CVE-2020-6385 * CVE-2020-6386 * CVE-2020-6387 * CVE-2020-6388 * CVE-2020-6389 * CVE-2020-6390 * CVE-2020-6391 * CVE-2020-6392 * CVE-2020-6393 * CVE-2020-6394 * CVE-2020-6395 * CVE-2020-6396 * CVE-2020-6397 * CVE-2020-6398 * CVE-2020-6399 * CVE-2020-6400 * CVE-2020-6401 * CVE-2020-6402 * CVE-2020-6403 * CVE-2020-6404 * CVE-2020-6405 * CVE-2020-6406 * CVE-2020-6407 * CVE-2020-6408 * CVE-2020-6409 * CVE-2020-6410 * CVE-2020-6411 * CVE-2020-6412 * CVE-2020-6413 * CVE-2020-6414 * CVE-2020-6415 * CVE-2020-6416 * CVE-2020-6417 * CVE-2020-6418 * CVE-2020-6420 -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 16 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.113-1 - update to 81.0.4044.113 * Mon Apr 13 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.92-1 - update to 81.0.4044.92 - squelch the selinux output in the post scriptlet - add Provides/Obsoletes in case we're build with shared set to 0 - add ulimit -n 4096 (needed for static builds, probably not harmful for shared builds either) - do static build * Sat Apr 4 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.163-1 - update to 80.0.3987.163 * Wed Apr 1 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.162-1 - update to 80.0.3987.162 * Wed Mar 18 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.149-1 - update to 80.0.3987.149 * Thu Feb 27 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.132-1 - update to 80.0.3987.132 - disable C++17 changes (this means f32+ will no longer build, but it segfaulted immediately) * Thu Feb 27 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.122-1 - update to 80.0.3987.122 * Mon Feb 17 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.106-1 - update to 80.0.3987.106 * Wed Feb 5 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.87-1 - update to 80.0.3987.87 * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 79.0.3945.130-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1797608 - CVE-2019-20446 librsvg: Resource exhaustion via crafted SVG file with nested patterns https://bugzilla.redhat.com/show_bug.cgi?id=1797608 [ 2 ] Bug #1801160 - CVE-2020-6381 chromium-browser: Integer overflow in JavaScript https://bugzilla.redhat.com/show_bug.cgi?id=1801160 [ 3 ] Bug #1801161 - CVE-2020-6382 chromium-browser: Type Confusion in JavaScript https://bugzilla.redhat.com/show_bug.cgi?id=1801161 [ 4 ] Bug #1801162 - CVE-2020-6385 chromium-browser: Insufficient policy enforcement in storage https://bugzilla.redhat.com/show_bug.cgi?id=1801162 [ 5 ] Bug #1801163 - CVE-2020-6387 chromium-browser: Out of bounds write in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1801163 [ 6 ] Bug #1801164 - CVE-2020-6388 chromium-browser: Out of bounds memory access in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1801164 [ 7 ] Bug #1801165 - CVE-2020-6389 chromium-browser: Out of bounds write in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1801165 [ 8 ] Bug #1801166 - CVE-2020-6390 chromium-browser: Out of bounds memory access in streams https://bugzilla.redhat.com/show_bug.cgi?id=1801166 [ 9 ] Bug #1801167 - CVE-2020-6391 chromium-browser: Insufficient validation of untrusted input in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1801167 [ 10 ] Bug #1801168 - CVE-2020-6392 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1801168 [ 11 ] Bug #1801169 - CVE-2020-6393 chromium-browser: Insufficient policy enforcement in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1801169 [ 12 ] Bug #1801170 - CVE-2020-6394 chromium-browser: Insufficient policy enforcement in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1801170 [ 13 ] Bug #1801171 - CVE-2020-6395 chromium-browser: Out of bounds read in JavaScript https://bugzilla.redhat.com/show_bug.cgi?id=1801171 [ 14 ] Bug #1801172 - CVE-2020-6396 chromium-browser: Inappropriate implementation in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1801172 [ 15 ] Bug #1801173 - CVE-2020-6397 chromium-browser: Incorrect security UI in sharing https://bugzilla.redhat.com/show_bug.cgi?id=1801173 [ 16 ] Bug #1801174 - CVE-2020-6398 chromium-browser: Uninitialized use in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1801174 [ 17 ] Bug #1801175 - CVE-2020-6399 chromium-browser: Insufficient policy enforcement in AppCache https://bugzilla.redhat.com/show_bug.cgi?id=1801175 [ 18 ] Bug #1801176 - CVE-2020-6400 chromium-browser: Inappropriate implementation in CORS https://bugzilla.redhat.com/show_bug.cgi?id=1801176 [ 19 ] Bug #1801177 - CVE-2020-6401 chromium-browser: Insufficient validation of untrusted input in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1801177 [ 20 ] Bug #1801178 - CVE-2020-6402 chromium-browser: Insufficient policy enforcement in downloads https://bugzilla.redhat.com/show_bug.cgi?id=1801178 [ 21 ] Bug #1801179 - CVE-2020-6403 chromium-browser: Incorrect security UI in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1801179 [ 22 ] Bug #1801180 - CVE-2020-6404 chromium-browser: Inappropriate implementation in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1801180 [ 23 ] Bug #1801181 - CVE-2020-6405 sqlite: Out-of-bounds read in SELECT with ON/USING clause https://bugzilla.redhat.com/show_bug.cgi?id=1801181 [ 24 ] Bug #1801182 - CVE-2020-6406 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1801182 [ 25 ] Bug #1801184 - CVE-2020-6408 chromium-browser: Insufficient policy enforcement in CORS https://bugzilla.redhat.com/show_bug.cgi?id=1801184 [ 26 ] Bug #1801185 - CVE-2020-6409 chromium-browser: Inappropriate implementation in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1801185 [ 27 ] Bug #1801186 - CVE-2020-6410 chromium-browser: Insufficient policy enforcement in navigation https://bugzilla.redhat.com/show_bug.cgi?id=1801186 [ 28 ] Bug #1801187 - CVE-2020-6411 chromium-browser: Insufficient validation of untrusted input in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1801187 [ 29 ] Bug #1801188 - CVE-2020-6412 chromium-browser: Insufficient validation of untrusted input in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1801188 [ 30 ] Bug #1801189 - CVE-2020-6413 chromium-browser: Inappropriate implementation in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1801189 [ 31 ] Bug #1801190 - CVE-2020-6414 chromium-browser: Insufficient policy enforcement in Safe Browsing https://bugzilla.redhat.com/show_bug.cgi?id=1801190 [ 32 ] Bug #1801191 - CVE-2020-6415 chromium-browser: Inappropriate implementation in JavaScript https://bugzilla.redhat.com/show_bug.cgi?id=1801191 [ 33 ] Bug #1801192 - CVE-2020-6416 chromium-browser: Insufficient data validation in streams https://bugzilla.redhat.com/show_bug.cgi?id=1801192 [ 34 ] Bug #1801193 - CVE-2020-6417 chromium-browser: Inappropriate implementation in installer https://bugzilla.redhat.com/show_bug.cgi?id=1801193 [ 35 ] Bug #1807341 - chromium-browser: Out of bounds memory access in streams https://bugzilla.redhat.com/show_bug.cgi?id=1807341 [ 36 ] Bug #1807343 - CVE-2020-6418 chromium-browser: Type confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1807343 [ 37 ] Bug #1807349 - CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend() https://bugzilla.redhat.com/show_bug.cgi?id=1807349 [ 38 ] Bug #1807381 - CVE-2020-6407 chromium-browser: Out of bounds memory access in streams https://bugzilla.redhat.com/show_bug.cgi?id=1807381 [ 39 ] Bug #1807498 - CVE-2020-6383 chromium-browser: Type confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1807498 [ 40 ] Bug #1807499 - CVE-2020-6384 chromium-browser: Use after free in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1807499 [ 41 ] Bug #1807500 - CVE-2020-6386 chromium-browser: Use after free in speech https://bugzilla.redhat.com/show_bug.cgi?id=1807500 [ 42 ] Bug #1811073 - CVE-2020-6420 chromium-browser: Insufficient policy enforcement in media https://bugzilla.redhat.com/show_bug.cgi?id=1811073 [ 43 ] Bug #1815241 - CVE-2020-6424 chromium-browser: Use after free in media https://bugzilla.redhat.com/show_bug.cgi?id=1815241 [ 44 ] Bug #1815242 - CVE-2020-6425 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1815242 [ 45 ] Bug #1815243 - CVE-2020-6426 chromium-browser: Inappropriate implementation in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1815243 [ 46 ] Bug #1815244 - CVE-2020-6427 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1815244 [ 47 ] Bug #1815245 - CVE-2020-6428 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1815245 [ 48 ] Bug #1815247 - CVE-2020-6429 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1815247 [ 49 ] Bug #1815248 - CVE-2020-6449 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1815248 [ 50 ] Bug #1815259 - CVE-2020-6422 chromium-browser: Use after free in WebGL https://bugzilla.redhat.com/show_bug.cgi?id=1815259 [ 51 ] Bug #1820155 - CVE-2020-6450 chromium-browser: Use after free in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1820155 [ 52 ] Bug #1820156 - CVE-2020-6451 chromium-browser: Use after free in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1820156 [ 53 ] Bug #1820157 - CVE-2020-6452 chromium-browser: Heap buffer overflow in media https://bugzilla.redhat.com/show_bug.cgi?id=1820157 [ 54 ] Bug #1822604 - CVE-2020-6454 chromium-browser: Use after free in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822604 [ 55 ] Bug #1822605 - CVE-2020-6423 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1822605 [ 56 ] Bug #1822606 - CVE-2020-6455 chromium-browser: Out of bounds read in WebSQL https://bugzilla.redhat.com/show_bug.cgi?id=1822606 [ 57 ] Bug #1822607 - CVE-2020-6430 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1822607 [ 58 ] Bug #1822608 - CVE-2020-6456 chromium-browser: Insufficient validation of untrusted input in clipboard https://bugzilla.redhat.com/show_bug.cgi?id=1822608 [ 59 ] Bug #1822609 - CVE-2020-6431 chromium-browser: Insufficient policy enforcement in full screen https://bugzilla.redhat.com/show_bug.cgi?id=1822609 [ 60 ] Bug #1822610 - CVE-2020-6433 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822610 [ 61 ] Bug #1822611 - CVE-2020-6434 chromium-browser: Use after free in devtools https://bugzilla.redhat.com/show_bug.cgi?id=1822611 [ 62 ] Bug #1822612 - CVE-2020-6435 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822612 [ 63 ] Bug #1822613 - CVE-2020-6436 chromium-browser: Use after free in window management https://bugzilla.redhat.com/show_bug.cgi?id=1822613 [ 64 ] Bug #1822614 - CVE-2020-6437 chromium-browser: Inappropriate implementation in WebView https://bugzilla.redhat.com/show_bug.cgi?id=1822614 [ 65 ] Bug #1822615 - CVE-2020-6438 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822615 [ 66 ] Bug #1822616 - CVE-2020-6439 chromium-browser: Insufficient policy enforcement in navigations https://bugzilla.redhat.com/show_bug.cgi?id=1822616 [ 67 ] Bug #1822617 - CVE-2020-6440 chromium-browser: Inappropriate implementation in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1822617 [ 68 ] Bug #1822618 - CVE-2020-6441 chromium-browser: Insufficient policy enforcement in omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1822618 [ 69 ] Bug #1822619 - CVE-2020-6442 chromium-browser: Inappropriate implementation in cache https://bugzilla.redhat.com/show_bug.cgi?id=1822619 [ 70 ] Bug #1822620 - CVE-2020-6443 chromium-browser: Insufficient data validation in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1822620 [ 71 ] Bug #1822621 - CVE-2020-6444 chromium-browser: Uninitialized use in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1822621 [ 72 ] Bug #1822622 - CVE-2020-6445 chromium-browser: Insufficient policy enforcement in trusted types https://bugzilla.redhat.com/show_bug.cgi?id=1822622 [ 73 ] Bug #1822623 - CVE-2020-6446 chromium-browser: Insufficient policy enforcement in trusted types https://bugzilla.redhat.com/show_bug.cgi?id=1822623 [ 74 ] Bug #1822624 - CVE-2020-6447 chromium-browser: Inappropriate implementation in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1822624 [ 75 ] Bug #1822625 - CVE-2020-6448 chromium-browser: Use after free in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1822625 [ 76 ] Bug #1824949 - CVE-2020-6457 chromium-browser: Use after free in speech recognizer https://bugzilla.redhat.com/show_bug.cgi?id=1824949 -------------------------------------------------------------------------------- ================================================================================ js-jquery-3.5.0-3.el8 (FEDORA-EPEL-2020-c1cbf6e822) JavaScript DOM manipulation, event handling, and AJAX library -------------------------------------------------------------------------------- Update Information: Release Jquery for EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1757437 - jquery for EPEL 8? https://bugzilla.redhat.com/show_bug.cgi?id=1757437 -------------------------------------------------------------------------------- ================================================================================ oval-graph-1.1.0-3.el8 (FEDORA-EPEL-2020-8e6b2c90fd) Tool for visualization of SCAP rule evaluation results -------------------------------------------------------------------------------- Update Information: Fixes the required dependency ---- release 1.1.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.0-2 - Fixes the required dependency * Wed Apr 15 2020 Jan Rodak <jrodak(a)redhat.com> - 1.1.0-1 - release 1.1.0 -------------------------------------------------------------------------------- ================================================================================ perl-Text-ASCIITable-0.22-11.el8 (FEDORA-EPEL-2020-973942af97) Create a nice formatted table using ASCII characters -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Text::ASCIITable, which creates a nice formatted table using ASCII characters. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1824317 - perl-Text-ASCIITable: please add epel8 branch https://bugzilla.redhat.com/show_bug.cgi?id=1824317 -------------------------------------------------------------------------------- ================================================================================ pgbouncer-1.12.0-4.el8 (FEDORA-EPEL-2020-b464c903b6) Lightweight connection pooler for PostgreSQL -------------------------------------------------------------------------------- Update Information: Update SPEC file (build & runtime requirements, macros, rpmlint fixes, etc.) & update version for CentOS/RHEL. - Fix dependencies in EPEL 8 - Do not touch in scriptlets or SysV init script (CentOS/RHEL 6) folders and files already part of the package - Permissions on the files already part of the package - SELinux context is wrong i(it's not even in the policy) in the SysV init script and if needed should be managed with semanage fcontext, not in the script. - The daemon runs unconfined, so the file context is useless in the SysV init script - Fix build on RHEL/CentOS 6/7/8. - Do not use a normal home folder and shell for the user. - Do not remove/change files in the scriptlets. - Do not start in daemon mode in systemd units. - Trim changelog. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 15 2020 Simone Caronni <negativo17(a)gmail.com> - 1.12.0-4 - Update SPEC file (build & runtime requirements, macros, rpmlint fixes, etc.). - Fix build on RHEL/CentOS 6/7/8. - Do not use a normal home folder and shell for the user. - Do not remove/change files in the scriptlets. - Do not start in daemon mode in systemd units. - Trim changelog. - Merge 1.12.0 from master. -------------------------------------------------------------------------------- ================================================================================ python-freeipa-1.0.3-1.el8 (FEDORA-EPEL-2020-a729ac8728) Lightweight FreeIPA client -------------------------------------------------------------------------------- Update Information: Initial packaging for Fedora -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1823091 - Review Request: python-freeipa - Lightweight FreeIPA client https://bugzilla.redhat.com/show_bug.cgi?id=1823091 [ 2 ] Bug #1825360 - python-freeipa-1.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825360 -------------------------------------------------------------------------------- ================================================================================ python-pyftdi-0.50.1-1.el8 (FEDORA-EPEL-2020-65382eed29) Python support for FTDI devices -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 0.50.1 (rhbz#1821032) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-zope-sqlalchemy-1.3-1.el8 (FEDORA-EPEL-2020-8c3acd5d8d) Minimal Zope/SQLAlchemy transaction integration -------------------------------------------------------------------------------- Update Information: Initial package for EPEL8. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python3-pyxattr-0.7.1-1.el8 (FEDORA-EPEL-2020-0b3ac00899) Extended attributes library wrapper for Python -------------------------------------------------------------------------------- Update Information: Initial build of pyxattr 0.7.1 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1818713 - please provide an epel8 build too https://bugzilla.redhat.com/show_bug.cgi?id=1818713 -------------------------------------------------------------------------------- ================================================================================ swift-lang-5.2.2-1.el8 (FEDORA-EPEL-2020-21f2297aa0) Apple's Swift programming language -------------------------------------------------------------------------------- Update Information: Updated to swift-5.2.2-RELEASE ---- Swift 5.2.1-RELEASE, now also available for s390x ---- Updated to Swift 5.2.1-RELEASE -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 15 2020 Ron Olson <tachoknight(a)gmail.com> 5.2.2-1 - Updated to swift-5.2.2-RELEASE * Sun Apr 12 2020 Ron Olson <tachoknight(a)gmail.com> 5.2.1-3 - Put CMake back as a build step because the version in EPEL 8 is too old * Sun Apr 12 2020 Ron Olson <tachoknight(a)gmail.com> 5.2.1-2 - Added s390x architecture and F30-specific requires * Mon Apr 6 2020 Ron Olson <tachoknight(a)gmail.com> 5.2.1-1 - Reorganized the package to place everything in a single location, changed the versioning scheme, and removed a number of obsolete patches * Wed Apr 1 2020 Ron Olson <tachoknight(a)gmail.com> 5.2.1-0.1.20200331git2e3b1b3 - Updated to swift-5.2.1-RELEASE * Wed Mar 25 2020 Ron Olson <tachoknight(a)gmail.com> 5.2-0.10.20200324git443e9a4 - Updated to swift-5.2-RELEASE * Thu Mar 12 2020 Ron Olson <tachoknight(a)gmail.com> 5.2-0.9.20200311git33150e3 - Updated to swift-5.2-DEVELOPMENT-SNAPSHOT-2020-03-11-a and switched to using patched version of cmake to get around issues building 5.2 with 3.17 --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel April 2020